๐น๐ท
rtbh.com.tr
2026-03-25 20:12:15
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐ณ๐ฑ
wlt-blocker
2026-03-25 06:35:34
(6 months ago)
Unauthorized access to webpage admin
Web App Attack
๐ฌ๐ง
consul.to
2026-03-25 06:16:54
(6 months ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
Neoloop
2026-03-25 04:33:02
(6 months ago)
[Wed Mar 25 05:21:16.629648 2026] [authz_core:error] [pid 2869653:tid 2869653] [client 20.199.43.112 ...
show more
[Wed Mar 25 05:21:16.629648 2026] [authz_core:error] [pid 2869653:tid 2869653] [client 20.199.43.112:60568] AH01630: client denied by server configuration: /var/www/html/neoloop.cz/sub/athena/.htpasswd.bak
[Wed Mar 25 05:23:32.080924 2026] [authz_core:error] [pid 2869723:tid 2869723] [client 20.199.43.112:55216] AH01630: client denied by server configuration: /var/www/html/neoloop.cz/sub/athena/.htpasswd.old
[Wed Mar 25 05:24:48.632982 2026] [authz_core:error] [pid 2868365:tid 2868365] [client 20.199.43.112:46610] AH01630: client denied by server configuration: /var/www/html/neoloop.cz/sub/athena/.htpasswd.save
[Wed Mar 25 05:31:56.132549 2026] [authz_core:error] [pid 2885109:tid 2885109] [client 20.199.43.112:32882] AH01630: client denied by server configuration: /var/www/html/neoloop.cz/sub/athena/.htpasswd.tmp
[Wed Mar 25 05:33:01.314145 2026] [authz_core:error] [pid 2868361:tid 2868361] [client 20.199.43.112:48046] AH01630: client denied by server configuration: /var/www/html/neolo
...
show less
Brute-Force
๐ฉ๐ช
botreporter
2026-03-25 00:37:00
(6 months ago)
CMS vulnerability/installation scanning
Brute-Force
Web App Attack
๐น๐ท
rtbh.com.tr
2026-03-24 20:12:14
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐ซ๐ท
masterguru
2026-03-24 18:29:29
(6 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐ท๐บ
Albram
2026-03-24 14:28:03
(6 months ago)
Tries find Web server vulnerability
...
Hacking
Web App Attack
๐ณ๐ฑ
DrLex0
2026-03-24 14:20:55
(6 months ago)
Probing for various exploits and especially trying to fetch things prohibited by robots.txt
20.199. ...
show more
Probing for various exploits and especially trying to fetch things prohibited by robots.txt
20.199.43.112 443 - [24/Mar/2026:14:18:18 +0000] "GET /cgi-bin/ HTTP/1.1" 301 3938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
20.199.43.112 443 - [24/Mar/2026:14:18:50 +0000] "GET /cgi-bin/ HTTP/1.1" 301 3938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
20.199.43.112 443 - [24/Mar/2026:14:19:58 +0000] "GET /sitemap.xml HTTP/1.1" 503 6980 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
20.199.43.112 443 - [24/Mar/2026:14:20:55 +0000] "GET /.env.old HTTP/1.1" 404 5942 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.3; rv:124.0) Gecko/20100101 Firefox/124.0"
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
rsiddall
2026-03-24 13:18:06
(6 months ago)
20.199.43.112 - - [24/Mar/2026:09:15:27 -0400] "GET /plugins/alertlist/img/redirect?url=http://169.2 ...
show more
20.199.43.112 - - [24/Mar/2026:09:15:27 -0400] "GET /plugins/alertlist/img/redirect?url=http://169.254.169.254/latest/meta-data/ HTTP/1.1" 404 1806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
20.199.43.112 - - [24/Mar/2026:09:17:13 -0400] "GET /plugins/graph/img/redirect?url=http://169.254.169.254/latest/meta-data/ HTTP/1.1" 404 1806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0"
20.199.43.112 - - [24/Mar/2026:09:18:05 -0400] "GET /plugins/stat/img/redirect?url=http://169.254.169.254/latest/meta-data/ HTTP/1.1" 404 1806 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0"
...
show less
Brute-Force
๐บ๐ธ
myagent.site
2026-03-24 10:43:19
(6 months ago)
Blocking for trying to access an exploit file: /wp-config.php.bak
Hacking
๐ฌ๐ง
dwmosaics
2026-03-24 10:20:13
(6 months ago)
"GET /robots.txt HTTP/1.1" 200 4789 "-" "Mozilla/5.0 (X11; Linux x86_64) Ap...
Brute-Force
Web App Attack
๐บ๐ธ
SketchyDude
2026-03-24 08:34:19
(6 months ago)
[Tue Mar 24 03:31:28.203060 2026] [authz_core:error] [pid 728392] [client 20.199.43.112:46412] AH016 ...
show more
[Tue Mar 24 03:31:28.203060 2026] [authz_core:error] [pid 728392] [client 20.199.43.112:46412] AH01630: client denied by server configuration: proxy:https://attachments.ouroboros-guild.us/server-status
[Tue Mar 24 03:31:58.505628 2026] [authz_core:error] [pid 728298] [client 20.199.43.112:36990] AH01630: client denied by server configuration: proxy:https://attachments.ouroboros-guild.us/server-status
[Tue Mar 24 03:33:54.368444 2026] [authz_core:error] [pid 728292] [client 20.199.43.112:43974] AH01630: client denied by server configuration: proxy:https://attachments.ouroboros-guild.us/server-status
[Tue Mar 24 03:33:55.763111 2026] [authz_core:error] [pid 728312] [client 20.199.43.112:43982] AH01630: client denied by server configuration: proxy:https://attachments.ouroboros-guild.us/server-status
[Tue Mar 24 03:34:13.899543 2026] [authz_core:error] [pid 728294] [client 20.199.43.112:43928] AH01630: client denied by server configuration: proxy:https://attachments.ouroboros-guild.us/serv
...
show less
Brute-Force
Web App Attack
๐ซ๐ท
lindi
2026-03-24 04:41:19
(6 months ago)
Probing for resource vulnerabilities
...
Web Spam
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
๐ฉ๐ช
LinuxAddict
2026-03-24 03:52:13
(6 months ago)
CrowdSec: crowdsecurity/http-probing triggered by 20.199.43.112 (11 events)
Brute-Force
SSH